Fedora 11 : viewvc-1.1.3-1.fc11 (2009-13634)

security fix: add root listing support of per-root authz config security fix: query.py requires 'forbidden' authorizer or none in config fix URL- ification of truncated log messages issue 3 fix regexp input validation issue 426, 427, 440 add support for configurable tab-to-spaces conversion fix...

Malware Flea Market Pays Hackers to Hijack PCs

Among a slew of online cybercrime forums, Pay-Per-Install.org stands out as a malware flea market where shadowy pushers of Trojan downloaders and tools for evading detection are bargaining with thousands of would-be “affiliates” willing to compromise victims’ computers globally and get paid for i...

httpd: mod_ssl per-connection memory leak for connections with zlib compression

Memory leak in the zlibstatefulinit function in crypto/comp/czlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service memory consumption via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server modssl that specify...

FreeBSD Security Advisory (FreeBSD-SA-09:06.ktimer.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:06.ktimer.asc ADV FreeBSD-SA-09:06.ktimer.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-09:06.ktimer.asc Authors: Thomas Reinke Copyright: Copyright c 2009...

Inside the OLPC security story

One of my favorite talks on computer security is this one by Ivan Krstic, the former head of security development for the ambitious One Laptop per Child project:...

Fedora Update for dbus FEDORA-2008-10733

Check for the Version of dbus OpenVAS Vulnerability Test Fedora Update for dbus FEDORA-2008-10733 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for dbus FEDORA-2008-2070

Check for the Version of dbus OpenVAS Vulnerability Test Fedora Update for dbus FEDORA-2008-2070 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2008-4237

Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting...

[SECURITY] Fedora 9 Update: dbus-1.2.6-1.fc9

D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...

[SECURITY] Fedora 10 Update: dbus-1.2.6-1.fc10

D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility...

CVE-2008-3954

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action...

CVE-2008-3954

CVE-2008-3954 describes a SQL injection in the AlstraSoft Forum Pay Per Post Exchange, exploitable via the cat parameter in the showcat action of index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, as stated in the NVD entry. Affected software is the AlstraSoft...

smartppc-sql.txt

+---------------------------------------+ | Blind SQL Injection Vulnerability | | in Pay Per Click Script | | found by Hamtaro aka CorVu5 | |there must be 50 ways to learn to hover| +---------------------------------------+ gdork: "Pay Per Click Script powered by SmartPPC.com." vuln:...

SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Vuln

No description provided by source. +---------------------------------------+ | Blind SQL Injection Vulnerability | | in Pay Per Click Script | | found by Hamtaro aka CorVu5 | |there must be 50 ways to learn to hover| +---------------------------------------+ gdork: "Pay Per Click Script powered b...

SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -W SmartPPC Pay Per Click Script Blind SQL Injection Exploit File affected: directory.php $idDirectory Vulnerability: Hamtaro Exploit: ka0x ka0x01atgmail.com ka0x@domlabs:$ ./smartppc.pl -u "http://localhost/directory.php?username=&idDirectory=2" ...

SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Vuln

Exploit for unknown platform in category web applications ==================================================================== SmartPPC Pay Per Click Script idDirectory Blind SQL Injection Vuln ====================================================================...

SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================================= SmartPPC Pay Per Click Script idDirectory Blind SQL Injection Exploit ======================================================================= !/usr/bin/perl -W SmartPP...

SmartPPC Pay Per Click Script - 'idDirectory' Blind SQL Injection (2)

!/usr/bin/perl -W SmartPPC Pay Per Click Script Blind SQL Injection Exploit File affected: directory.php $idDirectory Vulnerability: Hamtaro Exploit: ka0x ka0x@domlabs:$ ./smartppc.pl -u "http://localhost/directory.php?username=&idDirectory=2" -p Top i Getting default: -T 30 i Getting default: -l...

SmartPPC Pay Per Click Script - idDirectory Blind SQL Injection (2)

SmartPPC Pay Per Click Script - idDirectory Blind SQL Injection 2 !/usr/bin/perl -W SmartPPC Pay Per Click Script Blind SQL Injection Exploit File affected: directory.php $idDirectory Vulnerability: Hamtaro Exploit: ka0x ka0x@domlabs:$ ./smartppc.pl -u...

SmartPPC Pay Per Click Script - 'idDirectory' Blind SQL Injection (1)

+---------------------------------------+ | Blind SQL Injection Vulnerability | | in Pay Per Click Script | | found by Hamtaro aka CorVu5 | |there must be 50 ways to learn to hover| +---------------------------------------+ gdork: "Pay Per Click Script powered by SmartPPC.com." vuln:...